PluginsPlugin AwsCloudformation

Create or update a CloudFormation stack.

yaml
type: "io.kestra.plugin.aws.cloudformation.create"

Create a simple S3 bucket with CloudFormation and wait for completion.

yaml
id: aws_cfn_create_stack
namespace: dev

tasks:
  - id: create_s3_bucket
    type: io.kestra.plugin.aws.cloudformation.Create
    accessKeyId: "{{ secret('AWS_ACCESS_KEY_ID') }}"
    secretKeyId: "{{ secret('AWS_SECRET_ACCESS_KEY') }}"
    region: "us-east-1"
    stackName: "my-s3-bucket-stack"
    waitForCompletion: true
    templateBody: |
      AWSTemplateFormatVersion: '2010-09-09'
      Description: A simple S3 bucket
      Resources:
        MyS3Bucket:
          Type: 'AWS::S3::Bucket'
          Properties:
            BucketName: "kestra-cfn-test-1"
      Outputs:
        BucketName:
          Value: !Ref MyS3Bucket
          Description: Name of the S3 bucket created
Properties

The name of the stack.

Access Key Id in order to connect to AWS.

If no credentials are defined, we will use the default credentials provider chain to fetch credentials.

Enable compatibility mode.

Use it to connect to S3 bucket with S3 compatible services that don't support the new transport client.

The endpoint with which the SDK should communicate.

This property allows you to use a different S3 compatible storage backend.

Force path style access.

Must only be used when compatibilityMode is enabled.

SubType string

A list of Parameter structures for the stack.

AWS region with which the SDK should communicate.

Secret Key Id in order to connect to AWS.

If no credentials are defined, we will use the default credentials provider chain to fetch credentials.

AWS session token, retrieved from an AWS token service, used for authenticating that this user has received temporary permissions to access a given resource.

If no credentials are defined, we will use the default credentials provider chain to fetch credentials.

The AWS STS endpoint with which the SDKClient should communicate.

AWS STS Role.

The Amazon Resource Name (ARN) of the role to assume. If set the task will use the StsAssumeRoleCredentialsProvider. If no credentials are defined, we will use the default credentials provider chain to fetch credentials.

AWS STS External Id.

A unique identifier that might be required when you assume a role in another account. This property is only used when an stsRoleArn is defined.

Default PT15M
Format duration

AWS STS Session duration.

The duration of the role session (default: 15 minutes, i.e., PT15M). This property is only used when an stsRoleArn is defined.

AWS STS Session name.

This property is only used when an stsRoleArn is defined.

The structure that contains the stack template.

Default true

Whether to wait for the stack operation to complete.

The unique stack ID.

The name of the stack.

SubType string

A map of the stack's outputs.